This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I collected the tftp traces at the source network interface using wireshark while downloading a software to destination. When I analysed the TFTP traces I could see missing transmitted packets from the source but could see acknowledgement from the destination. Why is that? Why it couldn't capture the transmitted packets? Is there any thing wrong in the setting? Are the transmitted packets too fast to capture? If so is it possible to capture these packets by modifying any parameters on the wireshark?Please reply.

asked 12 Sep '13, 20:59

nsrikant's gravatar image

nsrikant
1111
accept rate: 0%

Is this a wired or wireless connection?

(13 Sep '13, 00:16) Jasper ♦♦

Why is that? If the ACK is present, then the capture machine must have dropped packets (or the missing packets were sent on another interface, but that's unlikely).

Why it couldn't capture the transmitted packets? Could be several reasons.

Is there any thing wrong in the setting? What setting?

Are the transmitted packets too fast to capture? Probably not, since each block is acknowledged so the round-trip latency dictates the transmission rate. But how fast is the sender transmitting?

If so is it possible to capture these packets by modifying any parameters on the wireshark? Try taking a look at the information provided at the Wireshark Performance wiki page.

permanent link

answered 19 Sep '13, 11:19

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142
accept rate: 20%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×42
×9

question asked: 12 Sep '13, 20:59

question was seen: 4,422 times

last updated: 19 Sep '13, 11:19

p​o​w​e​r​e​d by O​S​Q​A